jpadilla/pyjwt

Escaneado el 5 jun 2026

Puntuación de riesgo/ 100

Riesgo alto

Resumen

PyJWT library relies heavily on quantum-vulnerable cryptographic algorithms including ECDSA (multiple NIST curves and secp256k1) and RSA for JWT signing operations. With 90 high-severity findings across cryptographic implementation files, the library faces significant post-quantum security risks that will impact all downstream applications using JWT authentication.

Crítico

Alto

Medio

Bajo

Hallazgos principales

AltoECDSA
jwt/algorithms.py:41
ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)
Evidencia
```
ECDSA,
```
AltoNIST P-256 curve
jwt/algorithms.py:43
ML-KEM or ML-DSA
Evidencia
```
SECP256R1,
```
AltoNIST P-384 curve
jwt/algorithms.py:44
ML-KEM or ML-DSA
Evidencia
```
SECP384R1,
```
AltoNIST P-521 curve
jwt/algorithms.py:45
Evidencia
```
SECP521R1,
```
AltoElliptic Curve Cryptography
jwt/algorithms.py:46
Evidencia
```
EllipticCurve,
```

+ 87 hallazgos más en el reporte completo

Escanea tu propio repositorio

Gratis. Resultados en ~90 segundos. CBOM + PDF DORA/NIS2 incluidos.

Iniciar un escaneo gratis